Security: Crud binds the inline id in update/delete and quotes + validates
identifiers in getDataTablesFilter() (#209). Crud gains a filter object, a
PUT /{id} route and a public escapeLiteral() (#212).